Atty. Docket No. MS 163086.1 



CONSUMER NETWORK 
DIAGNOSTIC AGENT 



Dennis A. Morgan, David V. Gunter, 
Benjamin E. Nick and Skerwood H. Lawrence 



CERTIFICATION 

I kerety certify that tke attacked patent appkcation (along witk any otker paper referred to as 
fceing attacked or enclosed) is keing deposited witk tke United States Postal Service on tkis date 
Tanuary 24, 2001 , in an envelope as "Express Mail Post Office to Addressee" Mailing Lakel 
Numker EFl421308qiT IS addressed to tke: Box Patent Application, Assistant 
Commissioner for Patents, Waskington, D.C. 20231. 



Himansku S. Amin 



(Typed or Printed Name of Person Mailing Paper) 




(Signature of Person Mailing Paper) 



MS163086.1 Express Mail No. EF142130891US 

Title: Consumer Network Diagnostic Agent 



Technical Field 

The present invention relates generally to computer systems, and more 
particularly to a consumer network diagnostic agent for diagnosing problems associated 
with networked computer systems. 



Background 

Computers are often associated with one another in a network. Problems 

10 occurring in a networked computer system can cause errors in running applications in one 
or more computers within the network system. Where an unsophisticated user 
experiences a network problem, the application being run usually indicates some failxire 
at the appUcation leveL However, the user generally does not receive a detailed 
indication as to the nature of the problem causing the application failure. Diagnosing 

15 network related problems commonly requires training and experience with networked 
computer systems and takes a considerable amount of time. 

Typically, several diagnostic tests must be performed using several different tools 
or compUcated low-level command line interfaces. Based on the results of one such 
diagnostic test, a sophisticated technical person may run further tests in a hierarchical 

20 fashion, in order to expeditiously determine the cause of the problem. Due to the 

technical nature of computer network problems, such problems are commonly addressed 
by technical support personnel, who either come on-site, or work with the customer over 
the telephone, in order to troubleshoot the problem. Whether attempting to diagnose 
network problems alone, or with the help of technical support personnel, the experience 

25 is generally fiustrating for consumers not trained as network experts. 

Network problems can be the result of a wide range of issues, from minimal 
disruptions in service due to hardware troubles, to configuration problems associated with 
an operating system. Computer networks are generally implemented in a hierarchy of 
layers which segment the various required behaviors and functions in a manageable 
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fashion. One such layered network approach is known as the ISO/OSI (International 
Organization for Standardization Open System Interconnection) model. Another layered 
network model used is the standard TCP/IP (Transmission Control Protocol/Intemet 
Protocol) model, 

5 Although the layered network architectures allow programmers to focus on a 

layer within a model without having to understand the layers above or below, the layered 
approach fails to provide cooperative error reporting between layers. Thus, lower layers 
of the network do not report meaningful errors to upper layer applications. The result is 
that lower layer network problems can cause upper layer application problems without 

10 giving any information about why the errors are occurring. Applications which are run 
by users typically do not include sophisticated methods for identifying and correcting 
network related errors. Because specific problems are not identified for the application 
by the network, no corrective action can be taken. This results in confiision and 
fiiistration for consumers, who must then call support professionals to help solve their 

1 5 appUcation problems. 

Support professionals are thus forced to teach the consumer how to troubleshoot 
or otherwise obtain diagnostic information with command line utilities such as PING, 
Tebiet, and others. To fix network related problems, methodical troubleshooting 
techniques are required. The first step usually involves gathering information about the 

20 user machine. The second step is identifying what works and what doesn't. Many of the 
tools and techniques used in this process only fiiistrate a consumer who is not interested 
in the command line tools and interfaces that are necessary to solve the problem. In 
addition, the process takes a considerable amount of time, particularly where the 
technical support person is instructing an unsophisticated user to run such low level tests 

25 over the telephone, and having the user interpret the results. Moreover, such users are 
prone to mistype conmiand line instructions, and may therefore be providing the 
technical support personnel with bad information. Thus, there is a need for improved 
network diagnostic tools and methodologies. 

30 
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Sninmarv 

The following presents a simplified summary of the invention in order to provide 
a basic understanding of some aspects of the invention. This summary is not an extensive 
overview of the invention. It is intended to neither identify key or critical elements of the 

5 invention nor delineate the scope of the invention. Its sole purpose is to present some 
concepts of the invention in a simplified form as a prelude to the more detailed 
description that is presented later. A software tool and methodology are provided, which 
reduce or minimize the above shortcomings associated with the prior art, whereby an 
unsophisticated xiser may easily determine or identify problems in a networked computer 

1 0 system. The invention provides for significant reduction in the amount of time spent 
troubleshooting a networked computer system, including a local host computer in the 
networked system. 

The present invention relates to a software diagnostic tool and methodology for 
gathering one or more attributes or system related information and presenting the 

1 5 information to a user in a centraUzed location. The attribute information comprises 

system parameter settings, version information for operating systems and/or applications, 
status, and connectivity data, as well as an indication of adapters residing in the system 
and setup information related thereto. The tool obtains information and selectively 
performs connectivity tests and other diagnostic functions according to the obtained 

20 information, in order to provide a summary of system fimctionality to a user in a 
centralized, easy to understand format. The information is presented to the user in a 
collapsed display format, which the user may easily expand to obtain more detailed 
information. Alternatively or in combination, the information may be stored in a 
transferable file. 

25 A user simply launches the diagnostics tool, which then performs the diagnostic 

fimctions and provides the results without further user intervention. Whereas prior 
network troubleshooting was cumbersome and required some level of computer system 
knowledge, the diagnostic tool is operable by unsophisticated users. In addition, the tool 
gathers information from a variety of sources within the system, thus providing a single 

30 point of access for the user, whereas separate tests were previously required to obtain 

3 
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such information. The tool thus provides advantages in technical troubleshooting over 
the telephone, whereby a user may simply launch the tool and report the results to 
technical service personnel in an orderly fashion. The tool thus facilitates speedy 
troubleshooting, for example, whereby as much as 30 to 45 minutes may be saved on the 
5 average technical support service call. Furthermore, because the tool automates the 
diagnostic testing, the possibility of erroneous information being provided to technical 
support personnel is minimized, whereas previous diagnostics involving command line 
instructions were susceptible to user typing errors. 

The tool may also be employed as a component in a self-healing system. In this 

10 regard, an application error may be sensed and used to trigger the tool. The tool may 
then provide a result set including diagnostic information, which may then be used by 
another remedial software component to attempt to rectify any identified problems. The 
self-healing system may be operated in background or altematively may provide the user 
with one or more indications, for example, that a problem has been encountered and 

1 5 diagnostics are being performed, or other status messages providing the user with more 
information related to identified problems and/or attempted fixes. 

In accordance with an aspect of the present invention, there is provided a software 
tool, which allows an imsophisticated user to easily determine or identify problems in a 
networked computer system. The software tool comprises a diagnostic component 

20 adapted to determine one or more attributes associated with the computer system, and an 
interface component adapted to launch the diagnostic component and to render the 
attribute information to the user, wherein the diagnostic component and the interface 
component may, but need not reside on the same machine. The interface component may 
comprise, for example, a hierarchical tree structured graphical interface adapted to easily 

25 render the computer system attribute information in a logical fashion. In addition or 
altematively to rendering the attribute information to a user, the tool may be adapted to 
save the attribute to a file for subsequent use. 

The attribute information may comprise a first data set corresponding to services 
associated with the computer system, a second data set corresponding to computer 

30 information, and/or a third data set corresponding to modems and network adapters 
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associated with the computer system. For example, the first data set may comprise 
information related to at least one of mail service, news service, Intemet service, and 
loopback, the second data set may comprise information related to an operating system, 
and the third data set may comprise information related to at least one of a modem, a 
network adapter and an installed client. 

The diagnostic component may be adapted to query a data store and/or to perform 
one or more diagnostic tests such as verifying a connection. Based on the information 
thus obtained, the diagnostic component may selectively perform one or more of such 
diagnostic tests. For example, the diagnostic component may query a registry associated 
with the computer system, hi addition, the diagnostic component may comprise a ping 
utility adapted to test a network by sending out a packet and waiting for a response. The 
ping utility may further determine whether a particular IP address is online, and/or to 
determine an IP address from the response. 

According to another aspect of the invention, there is provided a method of 
diagnosing problems in a networked computer system, comprising determining one or 
more attributes associated with the networked computer system, and rendering the 
attributes to a user. The determination of the attribute information may comprise 
obtaining a first data set comprising information related to at least one of mail service, 
news service, Intemet service, and loopback. Alternatively or in combination, the 
method may comprise obtaining a second data set comprising information related to an 
operating system, and obtaining a third data set comprising information related to at least 
one of a modem, a network adapter, and an installed cUent. This may be achieved, for 
example, by querying a data store, such as a computer system registry, and/or by 
verifying a connection. Verifying a connection may comprise sending out a packet and 
waiting for a response, determining an IP address from the response, and/or determining 
whether a particular IP address is online. 

In accordance with yet another aspect of the invention, there is provided a 
computer-readable medium having computer-executable instructions for performing the 
methods of the invention, including instructions for determining at least one attribute 
associated with the computer system, and rendering the at least one attribute to a user. 
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According to still another aspect of the invention, there is provided a self-healing 
networked computer system, comprising a diagnostic component adapted to determine 
one or more attributes associated with the networked computer system, and a remedial 
object adapted to perform at least one remedial action according to the attribute 

5 information. The remedial action may comprise determining another attribute associated 
with the computer system according to the attribute information using the diagnostic 
component. The diagnostic component may be further adapted to determine another 
attribute associated with the computer system after performance of the at least one 
remedial action. In addition, the system may comprise a user interface component 

10 adapted to render the at least one attribute to a user, to render information related to the at 
least one remedial action to the user, and/or to laimch the diagnostic component. 

In accordMice with another aspect of the invention, there is provided a user 
interface associated with a networked computer system, comprising a first component 
adapted to launch a diagnostic tool, and a second component adapted to render attribute 

1 5 information related to the computer system to a user. The user interface may be 

graphical, audio, or any other form of interface. The second component may be adapted 
to render the attribute information to the user in a hierarchical fashion, for example, in a 
hierarchical tree structure having collapsible and expandable portions. The attribute 
information may comprise a first data set corresponding to services associated with the 

20 networked computer system, a second data set corresponding to computer information, 
and/or a third data set corresponding to modems and network adapters associated with the 
computer system. 

According to yet another aspect of the invention, there is provided a data packet 
for transmission between at least two processes, which comprises a diagnostic component 
25 adapted to determine one or more attributes associated with a networked computer 

system, and a user interface component adapted to launch the diagnostic component and 
to render the attributes to a user. Still another aspect of the invention provides a software 
tool for diagnosing problems in a networked computer system, comprising a diagnostic 
component adapted to determine at least one attribute associated with the computer 
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system, and a client side computer having a user interface component adapted to launch 
the diagnostic component and to render the at least one attribute to a user. 

To the accomplishment of the foregoing and related ends, certain illustrative 
aspects of the invention are described herein in connection with the following description 
5 and the annexed drawings. These aspects are indicative, however, of but a few of the 
various ways in which the principles of the invention may be employed and the present 
invention is intended to include all such aspects and their equivalents. Other advantages 
and novel features of the invention may become apparent from the following detailed 
description of the invention when considered in conjunction with the drawings. 

10 

Brief Description Of The Drawings 

Fig. 1 is a schematic diagram illustrating an exemplary diagnostic tool in 
accordance with another aspect of the invention; 

Fig. 2 is a schematic diagram illustrating an exemplary set of attribute information 
15 related to a computer system; 

Fig, 3 is a schematic diagram illustrating an exemplary diagnostic user interface 
in accordance with an aspect of the invention; 

Fig. 4 is a schematic diagram illustrating an exemplary network diagnostic HTML 
page interfacing a computer system registry in accordance with another aspect of the 
20 invention; 

Fig, 5 is an illustration of an exemplary graphical user interface in accordance 
with another aspect of the invention; 

Fig. 6 is an illustration of further aspects of the graphical user interface of Fig. 5; 
Fig. 7 is another illustration of fiulher aspects of the graphical user interface of 
25 Figs. 5 and 6; 

Fig. 8 is another illustration of further aspects of the graphical user interface of 
Figs. 5-7; 

Fig. 9 is another illustration of further aspects of the graphical user interface of 
Figs, 5-8; 
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Fig. 10 is a schematic diagram illustrating an exemplary self-healing computer 
system in accordance with another aspect of the invention; 

Fig. 11 is a flow diagram illustrating an exemplary method in accordance with 
another aspect of the invention; and 
5 Fig. 12 is a schematic block diagram of an exemplary operating enviroimient in 

which one or more aspects of the invention may be implemented. 

Detailed Description 

The present invention is now described with reference to the drawings, wherein 
10 like reference numerals are used to refer to like elements throughout. In the following 
description, for purposes of explanation, numerous specific details are set forth in order 
to provide a thorough understanding of the present invention. It may be evident, 
however, to one skilled in the art that the present invention may be practiced without 
these specific details. Moreover, well-known structures and devices are illustrated in 
1 5 some instances in block diagram form in order to facilitate description of the present 
invention. 

Referring now to the drawings, the present invention comprises an easy to use 
software tool and methodology by which an unsophisticated user may easily determine or 
identify problems in a networked computer system. The software tool may be used in 

20 association with, or comprise, a graphical or other type of user interface whereby the user 
may be provided with usefiil attribute information related to the computer system in a 
central location in order to improve and/or streamline troubleshooting network and other 
computer system problems. Altematively or in combination, the diagnostic tool may be 
employed in association with a remedial software component or object, by which a self- 

25 healing computer system may be implemented. 

Referring now to Fig. 1, an exemplary networked computer system 2 is illustrated 
having a local host computer 4 connected to one or more associated computers 6 and 8 
via a network 10, which may be a local area network (LAN), a wide area network 
(WAN), or other type of network. The local host computer 4 accesses the network 10 

30 using a network interface 12, whereby communication between the local host computer 4 
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and the various associated computers 6 and 8 is provided according to known network 
protocols. The computer system may furliier comprise a modem 14 providing access to 
the Internet 16 or other network (not shown) by which the local host computer 4 may 
access a server 18. In addition, the local host computer 4 comprises a registry 20 or other 

5 type of data store having information relating to the local host computer 4. Interfacing 
with the local host computer 4 may be accomphshed by a user via a display 22 and a 
mouse 24 and/or a keyboard (not shown), wherein the display 22 may be a touch screen 
type. It will be appreciated that interfacing may alternatively or in combination be 
accomphshed via audio interfacing components (not shown), such as microphones, 

10 speakers, audio annunciators, and the like. 

In accordance with an aspect of the invention, the networked computer system 2 
may comprise a diagnostic software tool 26 having a diagnostic component 28 adapted to 
determine at least one attribute associated with the networked computer system 2, and a 
user interface component 30 adapted to launch the diagnostic component 28 (e.g., using 

15 the mouse 24 and the display 22) and to render the attribute to a user, for example using 
the display 22. The diagnostic software tool 26 advantageously gathers or obtains 
information related to the computer system 2 and other attributes associated therewith, 
and selectively performs one or more tests associated with the local host computer 4. 
One or more attributes are then obtained by the diagnostic component based on the 

20 obtained information and/or the test results. The user interface component 30 may then 
render these attributes to a user in a unified structured form. Alternatively or in 
combination to rendering by the interface component 30, the attribute information may be 
stored in a file 32, Thus, the user need not perform comphcated or tedious tests from a 
command line, as was required in the past, in order to quickly determine and/or identify 

25 problems in the networked computer system 2 or the local host computer 4. In addition, 
the tool 26 may easily gather one or more such attributes from a variety of sources, for 
example, by querying one or more data stores (e.g., registry 20) and/or by performing one 
or more diagnostic tests, as illustrated and described in greater detail hereinafter. 

These attributes may comprise data relating to services associated with the local 

30 host computer 4, such as elecfronic mail (e-mail) service, news service, Internet service, 

9 
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and loopback. Other data may be gathered by the diagnostic component 28, such as 
information relating to an operating system (not shown). For example, the version 
number and configuration of an operating system residing on the local host computer 4 
maybe obtained and rendered to the user on the display 22. Moreover, information 

5 related to the modem 14, the network adapter or interface 12, and any installed cUents 
may be thus gathered by the diagnostic component 28. Li order to determine the 
attributes of the computer 4, the diagnostic component 28 may query a data store, such as 
the registry 20, and/or one or more files (not shown) in the local host computer 4. 

In addition, the diagnostic component 28 may perform one or more diagnostic 

10 tests, including verifying one or more connections between the computer 4 and other 
computers (e,g,, computers 6 and 8, and/or server 18), Such tests may be performed 
selectively according to information obtained by the diagnostic component 28. The 
diagnostic component 28 may accordingly comprise a ping utility (not shown) adapted to 
test the network 10 and/or the connectivity between the local host computer 4 and the 

1 5 Internet 1 6, by sending out a packet (not shown) and waiting for a response. Moreover, 
the component 28 may determine whether a particular IP address is online, and determine 
an IP address from the response. 

In addition to rendering the attribute information to a user via the user interface 
component 30, the attribute or attributes associated with the computer 4 may altematively 

20 or in combination be stored into the file 32 in the local host computer 4. This allows a 
user or technical support personnel to determine the relative health of the computer 4, or 
to provide a historical snapshot of the system performance and configuration. In one 
apphcation, the file 32 may be e-mailed to a support person from the local host computer 
4, or if the computer 4 cannot presently send e-mails, the file 32 maybe saved to a floppy 

25 and e-mailed from another computer nearby (e.g., computer 6 or 8). Furthermore, where 
a network problem is of a recurring nature, the archival of such attribute files 32 provides 
technical support personnel with a history of the configuration of the computer 4 at one 
or more points in time, which may provide insight as to the cause of a current problem. 
The diagnostic software tool 26 may be launched by a user by a single button 

30 click using the user interface component 30, after which the diagnostic component 28 

10 
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obtains information and selectively performs one or more network troubleshooting tests 
automatically based on the obtained information. This acquired information and^or test 
results may comprise, for example, determining computer system properties, determining 
version levels of operating systems and/or management utilities such as Windows 

5 management instrumentation (WMI). Diagnostic component 28 may further determine 
and enumerate network adapter configurations, modem configurations, PPP (Point-to- 
Point Protocol) and VPN (virtual private network) adapter configurations. 

Coimectivity tests may also be performed by the diagnostic component 28, such 
as by employing a packet Internet groper (PING) utility to 'ping' various connections. 

10 For example, a PING utility may send out a packet and wait for a response, in order to 
determine an Internet protocol (IP) address from the response and/or to determine 
whether a particular IP address is online. Such a PING utility may be employed by the 
diagnostic component 28 to pmg a loopback IP address, ping each adapter's IP address, 
ping each configured default gateway, ping each configured domain name system (DNS) 

1 5 server, ping each configured Windows Intemet name service (WINS) server, ping an 
Internet explorer-configured proxy server, ping a default Outlook Express mail server, 
and/or to ping a default Outlook Express news server. 

The connectivity tests may be performed using various connection protocols. For 
example, the diagnostic component 28 may attempt to connect via transmission control 

20 protocol (TCP) to the default Outlook Express mail server, to the default Outlook Express 
news server, and/or to the configured proxy server port. It will be appreciated that many 
different types of testmg and test variations are possible and contemplated as within the 
scope of the present invention, which is not limited to those illustrated and specifically 
described herein. Thus, the diagnostic component may, for example, ping and connect 

25 via TCP by IP or by hostname, integrate with WMI, and provide PING and connect via 
TCP methods for customizing HTML scripts. Moreover, it will be appreciated that the 
diagnostic component 28 of the software tool 26 may obtain mformation from the 
registry 20 and/or other data store (not shown) through a variety of methods. For 
instance, information from the registry 20 may be obtained by component 28 using one or 

30 more providers. 

11 
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Referring also to Figs. 2 and 3, the registry or data store 20 may comprise data or 
information related to adapters 40, including binding information 42 and modem related 
information 44. The registry may further comprise information relating to mail services 
46, news services 48, web proxy services 50, and/or to one or more operating systems 52. 
5 Such data store information may be obtained from the registry 20 by the diagnostic 
component 28 via one or more provider objects 54a, 54b, 54c, 54d, and 54e. The 
attribute information and data obtained by the diagnostic component 28 via queries to a 
data store (e.g., registry 20) and/or through performance of one or more diagnostic tests, 
may be advantageously provided to the user of the local host computer system 4 via the 

10 user interface component 30, as illustrated in Fig. 3. While the exemplary user interface 
30 is illustrated as a graphical user interface, it will be appreciated that other forms of 
user interface fall within the scope of the invention, including but not limited to audio and 
combination graphical/audio interfaces. 

The exemplary user interface component 30 may be implemented as an HTML 

15 page and comprises a title indicia 100 indicating that the user is interfacing with the 
network diaignostics tool 26. The interface component 30 allows the user to launch the 
diagnostic component 28 using a start activator component 102. The status of the 
diagnostic component 28 is provided to the user via a status indicia 104 {e,g,, having 
values such as running, finished, and the like) located proximate a status label component 

20 106. The exemplary interface component 30 provides a user with a variety of attribute 
information in a hierarchical fashion via a logical grouping of such information. In this 
regard, the interface 30 comprises main groupings or categories for service information, 
computer information, and information relating to modems and adapters, having group 
title label components 108, 110, and 1 12, respectively. Moreover, it will be appreciated 

25 that the hierarchical organization and presentation of attribute information may be 

similarly or equivalently provided in non-graphical interfaces (e.g., audio, etc.) within the 
scope of the present invention. 

The hierarchy of the interface 30 further comprises subcategories or subgroupings 
under the main groupings. The services grouping under the services group title label 

30 component 108 comprises a mail service subgroup having an associated label component 

12 
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1 14 and a pass/fail indicia 1 16, a news service subgroup having an associated label 
component 1 18 and a pass/fail indicia 120, an Internet service subgroup having an 
associated label component 122 and a pass/fail indicia 124, and a loopback service 
subgroup having an associated label component 126 and a pass/fail indicia 128. The 

5 label components 1 14, 118, 122, and 126 may include indications of the service 
subcategory (e.g., Mail Service, News Service, Internet Service, and Loopback, 
respectively) as well as address information relating to the specifics of the test performed 
(e.g., mail.columbo.test.com) as illustrated in Fig. 3. The pass/fail indicia 116, 120, 124, 
and/or 128, may advantageously indicate to a user whether a particular test has passed or 

10 failed. In addition, these indicia may further indicate that a particular test is unreachable, 
thus providing further useful troubleshooting information. 

The computer information grouping under the title label component 110 
comprises an operating system subgroup having an associated label component 130 and a 
test indicia 132, as well as a miscellaneous subgroup with a label component 134. The 

1 5 modems and adapters group under the title label component 1 12 comprises a modems 

subgroup having an associated label component 136, a network adapters subgroup having 
an associated label component 138 and a pass/fail indicia 140, and an installed chents 
subgroup having an associated label component 142. Each hierarchical subgroup in the 
interface component 30 may further comprise a collapse/expand actuator component 144. 

20 The collapse/expand indicia 144 allow a user to selectively expand and/or collapse the 

subgroup attribute information rendering in hierarchical fashion, in order to obtain further 
details regarding specific information gathered from one or more data stores (e.g., 
registry 20) associated with the computer 4, and/or the results of one or more diagnostic 
tests performed by the diagnostic component 28, as illustrated and described in greater 

25 detail hereinafter. 

The user interface component 30 further comprises a save to file activator 
component 150, an expand all activator component 152, and a hide all activator 
component 154. The save to file activator component 150 may be actuated by the user in 
order to cause the attribute information (e.g., information from a data store as well as 

30 diagnostic test results obtained by the diagnostic component 28) to be saved to a file (e.g.. 
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file 32) associated with the computer 4 for transmission to a technical service provider 
and/or archival, as described above. The expand all and hide all activator components 
152 and 154 may be actuated by the user in order to selectively expand and collapse each 
subgroup or branch in the hierarchical grouping of attribute information provided in the 
5 interface component 30, whereas the individual collapse/expand indicia 144 allow a user 
to selectively expand and/or collapse one such subgroup at a time. 

Although not specifically illustrated and described herein, it will be appreciated 
that many other groupings of attribute information and rendering forms thereof are 
possible. The diagnostic component 28, together with the exemplary user interface 
10 component 30 of Fig. 3 provides the user with an organized, easy to use network 

diagnostic tool 26, A user may be instructed by a technical support person to simply 
launch the diagnostic component 28 by actuating the start activator component 102 of 
interface 30, using an actuator device, for example, the mouse 24, a touch screen display 
(e.g., display 22), or via voice commands. The diagnostic component 28 thereafter 
15 gathers information and/or performs one or more diagnostic tests, and renders the 
attribute information to the user in the interface 30. 

The user may report the results to a technical support person, and selectively (or 
collectively) expand the rendered attributes using the individual collapse/expand indicia 
144 (and/or the expand all activator component 152) as needed to display or otherwise 
20 obtain more detailed attribute information. The diagnostic software tool 26 thus provides 
significant advantages over the prior diagnostic tools and techniques where the user was 
forced to type in comphcated command lines to actuate low level diagnostic utilities one 
at a time, and attempt to report the results accurately to a technical support person. 

Referring now to Fig. 4, the diagnostic tool 226 may comprise a user interface 
25 component (e.g., component 30 of Figs. 1 and 3) and a diagnostic component (e.g., 

component 28) which obtains information fi-om a data store (e.g., registry 20) via one or 
more providers. In one example, the tool 226, operating in user mode, may obtain 
attribute information firom a registry 220 via a network diagnostics windows management 
instrumentation (WMI) provider 200, which operates in the computer system (e.g., local 
30 host computer 4) in kemel mode. In addition, one or more of the diagnostic tests initiated 
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by the diagnostic component of the tool 226, may be performed using a windows WMI 
provider 202. Although illustrated using WMI providers, the invention finds application 
in association with other providers, hi addition, although the exemplary tools and 
systems are illustrated as employing Windows or Windows millennium edition (ME) 
operating systems, it will be appreciated that the invention comprises tools and methods 
for diagnosing network related problems in systems employing other operating systems, 

such as UNIX®, LINUX®, etc. 

The network diagnostics tool 226 may thus obtain attribute information using the 
WMI provider utility. The network diagnostics WMI provider 200 may be adapted to 
query the operating system and the system registry (e.g., registry 220) for parameters of 
interest to technical support personnel in troubleshooting network and other system 
problems. The WMI provider 202 is responsible for performing one or more diagnostic 
tests and reporting results to the user interface component of the diagnostic tool 226, 
which user interface may comprise an HTML page. 

The network diagnostics HTML page gathers network resource information from 
the providers 200 and 202, and sends appropriate instructions to the provider 200 for 
testing the availabihty of these resources. If the information reported is in question, 
corroboration through wbemtest (a WMI testing tool, not shown) may be employed. The 
network diagnostics WMI provider 200 may expose an interface for both local and 
remote network tests. In addition, the provider 200 may support the ability to query for 
information and may provide one or more methods of testing network resources, for 
example, via PING and TCP connections. 

The information available via the providers 200 and 202 may comprise current 
proxy settings for browser applications such as Internet Explorer®, the current default 
mail server for mail service applications such as Outlook Express®, the current default 
news server for news service applications such as Outlook Express®, and the ports each 
of the above are configured to use. These properties may be obtained by referencing 
within programs or scripts in the diagnostic component 28, for example, scripts created 
using JavaScript, VBScript, C, C++, and many other programming languages supported 
by the WMI framework. Other providers may be employed in the implementation of one 
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or more aspects of the invention apart from the providers specifically illustrated and 
described herein. 

Examples of the properties that may be accessed via the network diagnostics WMI 
provider 200 include Netdiag.IEProxy (e.g., what is the currently configured proxy 
5 server?), Netdiag.IEProxyPort (e.g. , what proxy port is IE using?), Netdiag.MailServer 
(e.g., what is the currently configured mail server?), Netdiag.MailPort (e.g., what email 
port is Outlook Express using?), Netdiag.NewsServer (e.g., what is the currently 
configured news server?), and Netdiag.NewsNNTPPort (e.g., What news port is Outlook 
Express using?). In addition, various diagnostic tests may be performed in the tool 226 
10 using one or more methods provided by the network diagnostics WMI provider 200. 
Examples of these methods include Netdiag.Ping (addr, str) (e.g., PING address), and 
Netdiag.ConnectToPort (addr, port) (e.g., connect to address and port). 

The diagnostic tool 226 may thus employ script (e.g., VBScript, JavaScript, and 
the like) in order to access these usefiil pieces of information and/or to initiate simple 

15 network and connectivity tests via a diagnostic component (e.g., component 28). The 

following are three sample pieces of code which demonstrate how various properties may 
be accessed via the network diagnostics WMI provider 200, the PING method and the 
ConnectToPort method. This sample code was written using HTML and VBScript, 
although other types and forms of such script fall within the scope of the present 

20 invention. 
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Get Properties Script: 

<HTML> 

<HEAD> 

<TITLE>Network Diagnostics Properties Example</TITLE> 
5 </HEAD> 

<BODY id=main rightMargin=50> 

<script id=shared_vbs language="VBScript"> 
<!-- 

10 On error resume next 

' Globals 
Dim netdiag 

1 5 function onLoadQ 

set all = document.all 
main.style.cursor = "wait" 

20 set t_Default = Locator.ConnectServer(, "root/default") 

set netdiags = t_Default.ExecQuery("Select * from NetDiagnostics") 

for each g in netdiags 
set netdiag = g 
25 next 

strProps = getPropsO 
netprops.innerHTML = strProps 

30 main,style.cursor = "auto" 

end function 

* getProps 
35 public function getPropsQ 

strlEP = CStr(netdiag.IEProxy) 
strlEPP = CStr(netdiag.IEProxyPort) 

str - str + "<b>Proxy: <yb>" + strlEP + "<b> Port: </b>" + strlEPP + "<br>" 
40 strMS = CStr(netdiag.MailServer) 
strMSP = CStr(netdiag.MailPort) 

str = str -i- "<b>Mail: </b>" + strMS + "<b> Port: </b>" + strMSP + "<br>" 
strNS = CStr(netdiag.NewsServer) 
strNSP = CStr(netdiag.NewsNNTPPort) 
45 str = str + "<b>News: </b>" + strNS + "<b> Port: <b>" + strNSP + "<br>" 
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getProps = str 
end function 

5 

//--> 
</script> 

<hl id=L_Title_Text>Network Diagnostics Properties Example</hl> 
10 <table> 

<trxtd bgcolor=cOcOcO><strong>List of properties<ystrong></tdx/tr> 
<trxtd><input type="button" name="pingbutton" value=="Get Properties" 
onclick="onLoad()"> 
</tdX/tr> 

1 5 <trxtd><span id=netpropsx/span></tdx/tr> 
</table> 
</BODY> 

<OBJECT ID="Locator" CLASSID="CLSID:76A64158-CB41-11D1-8B02- 
00600806D9B6"></OBJECT> 
20 </HTML> 



Ping Destination Script: 
<HTML> 
25 <HEAD> 

<TITLE>Network Diagnostics Ping Exaniple</TITLE> 
</HEAD> 

<BODY id=main rightMargin=50> 

30 '<script id=shared_vbs language="VBScript"> 
<!-- 

On error resume next 

' Globals 
35 Dimnetdiag 

function onLoadQ 

set all = document.all 
40 main.style.cursor = "wait" 

set t_Default = Locator.ConnectServer(, "root/default") 

set netdiags = t_Default.ExecQuery("Select * from NetDiagnostics") 

45 for each g in netdiags 
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set netdiag = g 

next 

strPing = getPing(pingaddr. value) 
5 pingtestdiv.irmerHTML = strPing 

main.style.cursor = "auto" 

end function 

10 

' getPing 

public function getPing (addr) 
getPing = 

15 

if Not IsEmpty(addr) then 
if netdiag.Ping (addr, str) then 

StrPing = "Successful ping - " + str 

else 

20 StrPing = "Cound not ping - " + str 

end if 
end if 

getPing = strPing 

25 

end function 

//--> 

</script> 

30 <hl id=L_Title_Text>Network Diagnostics Ping Example</hl> 
<table> 

<trxtd bgcolor==cOcOcOxstrong>Ping Test</strong></tdx/tr> 
<trxtd><input type="text" name="pingaddr" value=""> 
<input type="button" name="pingbutton" value="Ping" onclick="onLoadO"> 
35 </tdx/tr> 

<trxtd><span id=pingtestdiv></spanx/td></tr> 

</table> 

<BODY> 

<OBJECT ID="Locator" CLASSID="CLSID:76A64158-CB41-11D1-8B02- 
4000600806D9B6"></OBJECT> 
</HTM]> 
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TCP Connection Script: 
<HTML> 
5 <HEAD> 

<TITLE>Network Diagnostics TCP Connect Example</TITLE> 
</HEAD> 

<BODY id=main rightMargin=^50> 
<script id=shared_vbs language="VBScript"> 
10 <!-- 

On error resume next 

' Globals 
Dim netdiag 

15 

function onLoadQ 

set all = document.all 
main.style.cursor = "wait" 

20 

set t_Default = Locator.ConnectServer(, "root/default") 

set netdiags = t_Default.ExecQuery("Select * from NetDiagnostics") 

for each g in netdiags 
25 set netdiag = g 
next 

strPort = getPort(tcp_addr.value,tcp_j)ort.value) 
tcptestdiv.innerHTML = strPort 

30 

main.style.cursor = "auto" 

end function 

35 ' getPort 

public function getPort (tcpaddr, tcpport) 

getPort = "" 

40 if tcpaddr o "" and tcpport o "" then 

if netdiag.ConnectToPort (tcpaddr, tcpport) then 

StrPort = "Successfully connected to " 
StrPort = StrPort + tcpaddr + " on port: " + tcpport 
else 

45 StrPort - "Could not connect to " 
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strPort = strPort + tcpaddr + " on port: " + tcpport 
end if 

else 

StrPort = "Please enter Destination and Port" 

5 end if 

getPort = strPort 

end function 
10 //-> 

</script> 

<hl id=L__Title_Text>Network Diagnostics TCP Connect Example</hl> 
<table> 

1 5 <trxtd bgcolor==cOcOcOxstrong>TCP Connection Test</strongx/td></tr> 
<trxtd>Destination: <input type="text" nOTie="tcp_addr" value=""> 
Port: <input type="text" nanie="tcp_port" value=""> 

<input type="button" name="tcpportbutton" value=-"Connect" onclick="onLoad()"> 
</tdx/tr> 

20 <trxtd><span id=tcptestdivxyspanx/td></tr> 
</table> 
</BODY> 

<OBJECT ID="Locator" CLASSID="CLSID:76A64158-CB41-11D1-8B02- 
00600806D9B6"></OBJECT> 
25 </HTML> 

Referring now to Figs. 5-9, an exemplary user interface component 330 is 
illustrated. As illustrated in Fig. 5, the interface component 330 comprises a title indicia 
300, and allows a user to launch the diagnostic component 28 using a start activator 

30 component 302. The status of the diagnostic component 28 is provided to the user via a 
status indicia 304. The interface component 330 provides a user with a variety of attribute 
information in a hierarchical fashion via a logical grouping of such information. 
Accordingly, the interface 330 comprises main groupings or categories for service 
information, computer information, and information relating to modems and adapters, 

35 although other such groupings are contemplated as falling within the scope of the present 
invention. 

The hierarchy of the interface 330 further comprises subgroups under the main 
groupings to render information and/or test results related to services, computer 
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information, and modems and networks, respectively. For example, the service 
information grouping in the interface component 330 comprises a mail service subgroup 
having an associated label component and a pass/fail indicia (collectively 314), a news 
service subgroup having an associated label component and a pass/fail indicia 

5 (collectively 318), an Internet service subgroup having an associated label component 
and a pass/fail indicia (collectively 322), and a loopback service subgroup having an 
associated label component and a pass/fail indicia (collectively 326). 

The computer information group comprises an operating system subgroup having 
an associated label component and a test indicia (collectively 332), as well as a 

10 miscellaneous subgroup with a label component 334. The modems and adapters group 
comprises a modems subgroup having an associated label component 336, a network 
adapters subgroup having an associated label component and a pass/fail indicia 
(collectively 338), and an installed clients subgroup having an associated label 
component 342. Each hierarchical subgroup in the interface component 330 may fiirther 

15 comprise a collapse/expand actuator component (not numerically designated), allowing a 
user to selectively expand and/or collapse the subgroup attribute information rendering in 
hierarchical fashion, in order to obtain further detailed information. 

The user interface component 330 further comprises a save to file activator 
component 350, an expand all activator component 352, and a hide all activator 

20 component 354. As described above with respect to Fig. 3, the save to file activator 

component 350 may be actuated by the user in order to cause the attribute information to 
be saved in a file for transmission to a technical service provider and/or archival. The 
expand all and hide all activator components 352 and 354 may be actuated by the user in 
order to selectively expand and collapse each subgroup or branch in the hierarchical 

25 grouping of attribute information provided in the interface component 330, and the 
individual collapse/expand indicia maybe employed to selectively expand and/or 
collapse one such subgroup at a time, as illustrated in Figs. 6-9. 

For example, when the user expands the hierarchical information groups 
associated with the service information grouping, as illustrated in Fig. 6, more detailed 

30 information relating to the mail service, news service, Intemet service, and loopback 
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service subgroups may be provided in tiie interface 330. In the example of Fig. 6, the 
user has no mail or news services defined and is currently unable to contact the web 
proxy setting for the Internet Explorer web browser. It will be noted that prior to the 
present invention, the user would need to open the Litemet Explorer control panel and 

5 Outlook Express settings in order to obtain the information provided in the present 

invention in a centralized location via the exemplary interface 330. Thus, the invention 
may be advantageously employed in troubleshooting the user system, even by 
inexperienced or unsophisticated users. It will also be noted that the hierarchical 
rendering of system-related information includes further information relating to the 

1 0 loopback service subgroup 326 which may be fiirther expanded by the user via another 
collapse/expand indicia 327 located beneath the loopback service subgroup label 
component 326 as illustrated in Fig. 6. 

Another example of the expanded information presentation capabilities of the 
invention is illustrated in Fig. 7. Here, the interface 330 is shpwn with the operating 

15 system subgroup ofthe computer information grouping expanded. The expanded 

information rendering includes data and other information relating to the core operating 
system. In the past, the user would need to search through the system registry or other 
data store, in order to obtain such information. 

Referring also to Fig. 8, the exemplary mterface component 330 is illustrated with , 

20 the modems and networks information grouping expanded to provide further information 
relating to the modems, network adapters and installed cUents in the system. In the 
example illustrated in Fig. 8, the user has a single modem installed, two point-to-point 
protocol (PPP) type connections, a 1394 network interface card (NIC) adapter and an 
Intemet connection sharing (ICS) adapter installed. Further information relating to flie 

25 specific modems and adapters (e.g. , configuration information and the like) may be easily 
displayed in the interface component 330 using the collapse/expand indicia 337. In tiie 
past, the user would have to access a network neighborhood properties utility to 
determine the installation ofthe 1394 NIC and ICS adapters, and would go to a modem 
control panel utility in order to determine which modem is mstalled. In addition, the user 
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would need to access a dial-up connections folder to find out what PPP type connections 
were resident on the system. 

Referring also to Fig. 9, if the user desires more information relating to the 1394 
NIC adapter, the collapse/expand indicia 337 associated therewith may be employed to 

5 further expand the rendered information. As illustrated, the user may thereby obtain 
further information about the 1394 adapter, as well as the results of one or more tests 
associated therewith. These test results may be further expanded using further 
hierarchical collapse/expand indicia 339, Previously, the user would have to open the 
network properties utility, and further access the binding for the 1394 NIC adapter within 

10 the network properties utility (e.g., TCP -> 1394) and view the properties associated 

therewith to obtain basic information, such as IP settings associated with the adapter. In 
addition, the user would have to search through the system registry, and open a command 
prompt to run various tests manually, in order to obtain the results available through the 
exemplary interface component 330. 

15 As soon as the diagnostic component of the tool is launched (e.g., via start 

activator component 302, it will begin gathering and testing various network components. 
The tool will find computer information, enumerate network adapters, attempt to connect 
via TCP to configured services, and attempt to ping configured network services. Both 
successful and unsuccessful attempts to reach network resources may then be rendered to 

20 the user via the interface component 330. Among other things, the tool may render the . 
machine name, the version of one or more utilities or applications (e.g., WMI) and the 
version of the operating system. It also tests the availability of services that have been 
configured. The following are exemplary lists of information which may be rendered 
and/or information which may be tested using the diagnostic tool. It will be appreciated 

25 that the following lists are provided as examples, and that tests, information, and 

groupings other than those specifically illustrated and described herein are contemplated 
as falling within the scope of the invention. 
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The items and information that are reported may comprise services such as Outlook 
Express default mail server, Outlook Express default news server, and Internet Explorer 
proxy server. 

Computer related information which is rendered to the user via the interface 

5 component 330 comprises operating system information such as BootDevice = 

\\Device\HarddiskO, BuildNumber = 2514, BuildType (empty), Caption = Microsoft 
Windows, CodeSet = 1252, CountryCode = 1, CreationClassName = 
Win32_OperatingSystem, CSCreationClassName = Win32_ComputerSystem, 
CSDVersion = , CSName = COLUMBO-TEST, CurrentTimeZone = -480, Debug (empty), 

1 0 Description = Test Machine, Distributed (empty), ForegroundApplicationBoost (empty), 
FreePhysicalMemory = 541 48, FreeSpacelnPagingFiles = 1 929044, FreeVirtualMemory = 
1983192, InstallDate = 20000307055202.000000-480, LastBootUpTime (empty), 
LocalDateTime = 20000309121053.060000-480, Locale = 0409, Manufacturer = 
Microsoft Corporation, MaxNumberOfProcesses = -1, MaxProcessMemorySize = 

15 2093056, Name = Microsoft Windows ME|C:\WINDOWS|, NumberOfLicensedUsers 
(empty), NumberOfProcesses = 14, NumberOfUsers (empty). Organization = msft, 
OSLanguage = 1033, OSProductSuite (empty), OSType = 17, OtherTypeDescription 
(empty), PlusProductID (empty), PlusVersionNumber (empty). Primary = True, 
QuantumLength (empty), QuantumType (empty), RegisteredUser test, SerialNumber 

20 (empty), ServicePackMajorVersion (empty), ServicePackMinorVersion (empty), 
SizeStoredhiPagingFiles = 1966632, Status = OK, SystemDevice (empty), 
SystemDirectory = C:\WINDOWS\SYSTEM, TotalSwapSpaceSize (empty), 
TotalVirtuaMemorySize = 2097148, TotalVisibleMemorySize = 130516, Version = 
4.90.2514, and WindowsDirectory = C:\WINDOWS. 

25 Rendered miscellaneous information includes OS Version = 4.90.25 1 4, and WMI 

Version =1164.0003. 

Modem information which is rendered to the user via the interface component 330 
comprises AnswerMode (empty), AttachedTo = COM3, , Availability (empty), BlindOfif 
= X4, BlindOn = X3, Caption = MT5634ZBA-USB Modem, CompatibilityFlags (empty), 

30 Compressionlnfo (empty), CompressionOff = %C0, CompressionOn = %C 1 , 
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ConfigManagerErrorCode (empty), ConfigManagerUserConfig (empty), 
ConfigurationDialog = modemui.dll, CountrySelected = United States of America, 
CreationClassName = Win32_PotsModem, Description = MT5634ZBA-USB Modem, 
DevicelD = USB\MULTIUSB\WDMMDMO, DeviceLoader = *vcomm, DeviceType = 

5 External Modem, DialType (empty), DriverDate (empty), ErrorCleared (empty), 
ErrorControlForced = \N4, ErrorControlInfo (empty), ErrorControlOff = \N1, 
ErrorControlOn = \N3, ErrorDescription (empty), FlowControlHard = &K3, 
FlowControlOff = &K0, FlowControlSofl = &K4, InactivityScale = "3c000000", 
InactivityTimeout (empty), Index (empty), InstallDate (empty), LastErrorCode (empty), 

10 MaxBaudRateToPhone (empty), axBaudRateToSerialPort (empty), 

MaxNxmiberOfPasswords (empty). Model = MT5634ZBA-USB Modem, Modemlnff ath 
= MDMLUC.INF, ModemlnfSection = Modem2, ModulationBell = B1B16B2, 
ModulationCCITT = B0B15B2, ModulationScheme (empty). Name = Unimodem.vxd, 
PNPDevicelD = USB\MULTIUSB\WDMMDMO, PortSubClass = "02", 

1 5 PowerManagementSupported (empty). Prefix = AT, ProviderName = Lucent, Pulse = P, 
Reset = AT&F, ResponsesKeyName (empty), RingsBeforeAnswer (empty), 
SpeakerModeDial = Ml , SpeakerModeOff = MO, SpeakerModeOn = M2, - 
SpeakerModeSetup = M3, SpeakerVolumeHigh = L3, SpeakerVolumelnfo (empty), 
SpeakerVolumeLow = LO, SpeakerVolumeMed = L2, Status = OK, Statuslnfo = 3, 

20 StringFormat (empty), SupportsCallback (empty), SupportsSynchronousConnect (empty), 
SystemCreationClassName = Win32_ComputerSystem, SystemName = COLUMBO- 
TEST, Terminator = , TimeOfLastReset (empty), Tone = T, and VoiceSwitchFeature 
(empty). 

Network adapters information which is rendered to the user via the interface 
25 component 330 comprises Caption = [0003] hitel(R) PRO PCI Adapter, 
ArpAlwaysSourceRoute = (empty), ArpUseEtherSNAP = (empty), 
DeadGWDetectEnabled = (empty). Description = Intel(R) PRO PCI Adapter, 
MACAddress = 00:DO:B7:1F:D7:29, ServiceName = (empty), DatabasePath = (empty), 
DefaultGateway =20.0.0.1, DefaultTOS = (empty), DefaultTTL = (empty), 
30 DHCPEnabled = TRUE, DHCPLeaseObtained = 03/09/00 12:09:21 :, DHCPLeaseExpires 
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= 03/09/00 12:12:21:, DHCPServer = 10.0.0.4 , DNSDomain = columbo.test.com, 
DNSDomainSuffixSearchOrder = (empty), DNSEnabledForWINSResolution = (empty), 
DNSHostName = COLUMBO-TEST, DNSServerSearchOrder =, ForwardBufferMemory 
= (empty), GatewayCostMetric = (empty), IGMPLevel = (empty), IPAddress = 

5 10.0.0.193, IPFilterSecurityEnabled = (empty), EPPortSecurityEnabled = (empty), 
IPSecPermitlPProtocols = (empty), IPSecPermitTCPPorts = (empty), 
IPSecPermitUDPPorts = (empty), IPSubnet = 255.255.255.0, IPUseZeroBroadcast = 
(empty), KeepAlivelnterval = (empty), KeepAliveTime = (empty), MTU = (empty), 
NumForwardPackets = (empty), PMTUBHDetectEnabled = (empty), 

10 PMTUDiscoveryEnabled = (empty), TCPMaxComiectRetransmissions = (empty), 
TCPMaxDataRetransmissions = (empty), TCPNumComiections = (empty), 
TCPUseRFCl 122UrgentPoiiiter = (empty), TCPWindowSize = (empty), 
WBSfSEnableLMHostsLookup = (empty), WINSHostLookupFile = (empty), 
WDSfSPrimaryServer = 10.0.0.11, WINSScopelD = (empty), WINSSecondaryServer = 

15 10.0.0. 12, and IPXEnabled = (empty). 

Reported infonnation related to installed clients comprises Description = Client 
for Microsoft Networks, InstallDate = 20000305160000.000000-480, Manufacturer = 
Microsoft, Name = Client for Microsoft Networks, and Status = OK. Test result 
information which is rendered to the user via the interface component 330 comprises 

20 items which may be tested by the network diagnostics tool according to the present 

invention, including services or parameters which may be tested, and which tests are used 
for that service or parameter. These include PING tests such as Loopback address, IP 
address(s) per adapter. Default Gateway(s) per adapter, DHCP server(s) per adapter, DNS 
server(s) per machine (This is a global parameter), WINS server(s) per adapter. Outlook 

25 Express Default Mail Server , Outlook Express Default News Server, and IE Proxy 
Server (Winsock Proxy is not detected). In addition, exemplary TCP connections tests 
may include Outlook Express Default Mail Server tests of the following ports: P0P3 port 
110, P0P2 port 109, SMTP port 25, and IMAP port 143. Outlook Express Default News 
Server tests the NNTP port 1 19, and EE Proxy Server tests the TCP port that is configured 

30 in the IE proxy port settings. 
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As illustrated by the above listings, the diagnostic tool provides thorough 
diagnostic functionality to the user who merely launches the diagnostic component (e.g., 
component 28 of Fig. 1) by pressing a button (e.g., start activator component 302) in the 
interface component 330, The attribute information obtained by the diagnostic 
5 component is then rendered to the user via an easy to understand user interface (e.g., 
interface component 330) in a logically organized hierarchical manner, hi addition, the 
attribute information may be saved to a file for archival purposes, or for transmission to 
technical support personnel The inventors have found that such attribute information 
files are relatively small (e.g., 20 to 25 kbytes) in size, and are therefore easily adapted 
1 0 for storage on a floppy disk. Thxis, where a network problem prevents the user firom 
directly e-mailing such a file to a technical support person from the machine or system 
being tested, the file may be transported to a fimctional machine easily using a floppy 
disk. 

The diagnostics tool may further provide for saving such attribute information 

1 5 files into a safe or protected portion of the system memory. For example, the files may 
be stored to a default directory which is protected from tampering (e.g., 
\windows\pchealth\helpctr\netdiag). Where multiple files are to be employed (e.g., such 
as where a user creates such files periodically), the tool may be adapted to give each such 
file a unique name, which may comprise, for example, descriptive information, such as 

20 time and date, so as to make the files easily identifiable and distinct (e.g., using a format 
such as 'netdiag(Day)(Month)(Year)(Hour)(Minute)(Seconds).htm'). As described above, 
such files may be compared, for example, to provide a technical support person with 
information about changes in a system configuration or performance over time. This 
information, in turn, may provide an indication of likely causes of problems being 

25 experienced in the computer system. 

The network diagnostics tool of the present invention thus provides powerful 
diagnostic functionality to the user in combination with a centralized grouping of a large 
amount of useful information via the user interface component thereof. The tool answers 
many of the initial questions a support professional would ask when diagnosing a 

30 network problem. It saves valuable troubleshooting time (e.g. up to 30 to 45 minutes 
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saved in the average technical support service call), and helps create a positive support 
experience for the consumer. For example, where a user is experiencing problems 
accessing network resources, a technical support person typically asks what the user is 
trying to reach, what the user's IP address is, whether the user is using WINS or DNS, 
5 whether the user can resolve names, and whether the user can resolve IP addresses. The 
diagnostics tool can expeditiously answer some or all of these questions in a short amount 
of time without the frustration experienced by users in the past. ^ 

Referring now to Fig. 10, in addition to rendering attribute information to a user 
via a user interface, the diagnostic component 428 may be adapted to interact with a 

10 remedial component or object 400. The remedial object 400 and the diagnostic 

component 428 may be employed in a self-healing computer system 402. The diagnostic 
component 428 is adapted to determine at least one attribute associated with the computer 
system, as illustrated and described herein with respect to diagnostic component 28 of 
Fig. 1. The remedial object 400 is adapted to perform at least one remedial action 

1 5 according to the attribute information obtained by the diagnostic component 428 . Thus, 
where a problem is detected by the diagnostic component 428, the remedial object 400 
may attempt to fix the problem. The system may fiirther comprise a user interface 
component 430 (e.g., graphical or otherwise), whereby a user may be notified that there is 
a problem, that it has been fixed, that attempts to fix the problem are underway, and/or 

20 that attempted fixes have failed. Thus, the system may be employed to identify and 
rectify problems without user intervention. 

The remedial action may also comprise determining another attribute associated 
with the computer system. Thus, the remedial object 400 may initiate further testing or 
information gathering by the diagnostic component 428 according to the attribute 

25 information thusfar obtained. The testing via the diagnostic component 428 and the 
performance of remedial actions by the remedial object 400 may be iterated. For 
instance, the diagnostic component 400 may be further adapted to determine another 
attribute associated with the computer system after performance of a remedial action. 
Furthermore, the diagnostic component may be launched or actuated alternatively or in 
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combination through detection of a problem or error (e.g., an application error), and/or 
via the user interface component 430. 

In view of the structural, functional, and graphical features described above, 
methodologies in accordance with various aspects of the present invention will be better 

5 appreciated with reference to Fig. 1 1 . Although the methodology of Fig. 1 1 is illustrated 
and described as a series of steps, it is to be understood and appreciated that the present 
invention is not limited by the order of steps, as some steps may, in accordance with the 
present invention, occur in different orders and/or concurrently with other steps from that 
shown and described herein. Moreover, not all illustrated steps may be required to 

10 implement a methodology in accordance with an aspect the present invention. 

Referring now to Fig. 11, an exemplary method 500 is illustrated for diagnosing 
problems in a networked computer system (eg., system 2 of Fig: 1), The method 500 
may be implemented using a software tool such as tool 26 illustrated and described 
above. However, it will be appreciated that the method 500 finds appUcation in 

1 5 association with other tools and systems not specifically illustrated and/or described 

herein. The method 500 comprises determining at least one attribute associated with the 
computer system, and rendering the at least one attribute to a user. Beginning at step 
502, information relating to mail service, news service, Internet service, and loopback is 
obtained. At step 504, information related to one or more operating systems associated 

20 with the computer system is obtained, and at step 506 information related to modems, 
network adapters, and installed clients is obtained. One or more connections are verified 
at step 508, after which the test results and other attribute information are rendered to a 
user via a user interface at step 510, Alternatively or in combination, the attribute 
information may be saved to a file associated with the computer system (e.g., file 32 of 

25 Fig. 1). 

Thus, the method 500 obtains one or more sets of information and/or test results 
relating to the computer system, and provides these to the user. The attribute information 
may be grouped according to a logical or other hierarchy, such as illustrated in the 
exemplary user interface component 30 of Figs. 1 and 3, Such groupings may comprise 
30 service information, operating system information, and modems and adapters 
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information. The attribute information may be obtained, for example, by querying a data 
store, such as a system registry 20, and/or verifying a connection via PING or TCP 
diagnostic tests. Thus, the connectivity of the computer system may be verified at step 
508 by sending out a packet and waiting for a response, hi this manner, the method 500 
5 may advantageously determine an IP address fi:om the response, and/or determine 
whether a particular IP address is online. 

In order to provide a context for the various aspects of thejnvention, Fig. 12 and 
the following discussion are intended to provide a brief, general description of a suitable 
computing environment in which the various aspects of the present invention may be 

1 0 implemented. While the invention has been described above in the general context of 

software tools and computer-executable instructions of a computer program that runs on a 
computer and/or computers, those skilled in the art will recognize that the invention also 
may be implemented in combination with other program modules. Generally, program 
modules include routines, programs, components, data structures, etc. that perform 

15 particular tasks and/or implement particular abstract data types. Moreover, those skilled 
in the art will appreciate that the inventive methods may be practiced with other computer 
system configurations, including single-processor or multiprocessor computer systems, 
minicomputers, mainfirame computers, as well as personal computers, hand-held 
computing devices, microprocessor-based or programmable consimier electronics, and 

20 the like. The illustrated aspects of the invention may also be practiced in distributed 
computing environments where tasks are performed by remote processing devices that 
are linked through a communications network. However, some, if not all aspects of the 
invention can be practiced on stand-alone computers. In a distributed computing 
environment, program modules may be located in both local and remote memory storage 

25 devices. 

With reference to Fig. 12, an exemplary environment for implementing various 
aspects of the invention includes a conventional personal or server computer 620, 
including a processing unit 621, a system memory 622, and a system bus 623 that couples 
various system components including the system memory to the processing unit 621 . 
30 The processing imit 621 may be any of various commercially available processors. Dual 
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microprocessors and other multi-processor architectures also can be used as the 
processing unit 62 L 

The system bus 623 may be any of several types of bus structure including a 
memory bus or memory controller, a peripheral bus, and a local bus using any of a 
5 variety of conventional bus architectures. The computer memory may include read only 
memory (ROM) 624 and random access memory (RAM) 625. A basic input/output 
system (BIOS), containing the basic routines that help to transfer information between 
elements within the computer 620, such as during start-up, is stored in ROM 624. 

The computer 620 further includes a hard disk drive 627, a magnetic disk drive 

10 628, e.g., to read from or write to a removable disk 629, and an optical disk drive 630, 
e.g., for reading a CD-ROM disk 63 1 or to read from or write to other optical media. The 
hard disk drive 627, magnetic disk drive 628, and optical disk drive 630 are connected to 
the system bus 623 by a hard disk drive interface 632, a magnetic disk drive interface 
633, and an optical drive interface 634, respectively. The drives and their associated 

1 5 computer-readable media provide nonvolatile storage of data, data structures, computer- 
executable instructions, etc. for the computer 620, including for the storage of broadcast 
programming in a suitable digital format. 

Although the description of computer-readable media above refers to a hard disk, 
a removable magnetic disk and a CD-ROM, it will be appreciated by those skilled in the 

20 art that other types of media which are readable by a computer, such as zip drives, 

magnetic cassettes, flash memory cards, digital video disks, Bernoulli cartridges, and the 
like, may also be used in the exemplary operatmg environment, and fiirther that any such 
media may contain computer-executable instructions for performing the methods of the 
present invention. A number of program modules may be stored in the drives and RAM 

25 625, including an operating system 635, one or more application programs 636, other 
program modules 637, and program data 638. 

A user may enter commands and information into the computer 620 through a 
keyboard 640 and a pointing device, such as a mouse 642. Other input devices (not 
shown) may include a microphone, an IR remote control, a joystick, a game pad, a 

30 satellite dish, a scanner, or the like. These and other input devices are often connected to 
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the processing unit 621 through a serial port interface 646 that is coupled to the system 
bus 623, but may be connected by other interfaces, such as a parallel port, a game port, a 
universal serial bus ("USB"), an IR interface, etc, A monitor 647 or other type of display 
device is also connected to the system bus 623 via an interface, such as a video adapter 
5 648. In addition to the monitor, a computer typically includes other peripheral output 
devices (not shown), such as speakers, printers etc. 

The computer 620 may operate in a networked environment using logical 
connections to one or more remote computers, such as a remote computer(s) 649. The 
remote computer(s) 649 may be a workstation, a server computer, a router, a personal 

10 computer, microprocessor based entertainment appUance (e.g., a WebTV cUent system), 
a peer device or other common network node, and typically includes many or all of the 
elements described relative to the computer 620, although, for purposes of brevity, only a 
memory storage device 650 is illustrated. The logical connections depicted include a 
local area network (LAN) 65 1 and a wide area network (WAN) 652. Such networking 

1 5 environments are commonplace in offices, enterprise-wide computer networks, intranets 
and the Internet. 

When used in a LAN networking environment, the computer 620 is coimected to 
the local network 651 through a network interface or adapter 653. When used m a WAN 
networking environment, the computer 620 typically includes a modem 654, or is 

20 connected to a communications server on the LAN, or has other means for estabUshing 
communications over the WAN 652, such as the Internet. The modem 654, which may 
be intemal or external, is connected to the system bus 623 via the serial port interface 
646. In a networked environment, program modules depicted relative to the computer 
620, or portions thereof, may be stored in the remote memory storage device 650. It will 

25 be appreciated that the network connections shown are exemplary and other means of 
establishing a conmiunications link between the computers may be used. 

Although the invention has been shown and described with respect to certain 
implementations, it will be appreciated that equivalent alterations and modifications will 
occur to others skilled in the art upon the reading and understanding of this specification 

30 and the annexed drawings. In particular regard to the various functions performed by the 
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above described components (assemblies, devices, circuits, systems, etc.), the terms 
(including a reference to a "means") used to describe such components are intended to 
correspond, unless otherwise indicated, to any component which performs the specified 
function of the described component {i.e. , that is functionally equivalent), even though 

5 not structurally equivalent to the disclosed structure, which performs the function in the 
herein illustrated exemplary appUcations and implementations of the invention. As used 
in this application, the term "component" may refer to a computer-related entity, either 
hardware, a combination of hardware and software, software, or software in execution. 
For example, a component may be, but is not limited to, a process running on a processor, 

10 a processor, an object, an executable, a thread of execution, a program, and a computer 
By way of illustration, both an appUcation running on a server and the server can be a 
component. 

hi addition, while a particular feature of the invention may have been disclosed 
with respect to only one of several aspects or implementations of the invention, such a 

15 feature may be combined with one or more other features of the other implementations as 
maybe desired and advantageous for any given or particular apphcation. Furthermore, to 
the extent that the terms "includes", "including", "has", "having", and variants thereof are 
used in either the detailed description or the claims, these terms are intended to be 
inclusive in a manner similar to the term "comprising" and its variants. 

20 What has been described above includes examples of the present invention. It is, 

of course, not possible to describe every conceivable combination of components or 
methodologies for purposes of describing the present invention, but one of ordinary skill 
in the art may recognize that many fiirther combinations and permutations of the present 
invention are possible. Accordmgly, the present invention is intended to embrace all 

25 such alterations, modifications and variations that fall within the spirit and scope of the 
appended claims. 
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